From: intrigeri <intrigeri@boum.org>
Date: Sun, 2 Dec 2012 10:29:22 +0000 (+0100)
Subject: libvirt::host: don't accept FTP from VMs.
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=ad4e76925e6372752393bb2cb6db0aa8c7aaa468;p=puppet-shorewall.git

libvirt::host: don't accept FTP from VMs.

It was meant to provide preseeding files over FTP,
but the Debian installer has been supporting TFTP for a while,
so no additional software is needed.
---

diff --git a/manifests/rules/libvirt/host.pp b/manifests/rules/libvirt/host.pp
index ac60b98..aaecd9d 100644
--- a/manifests/rules/libvirt/host.pp
+++ b/manifests/rules/libvirt/host.pp
@@ -31,7 +31,6 @@ class shorewall::rules::libvirt::host (
   }
 
   shorewall::rule::accept::from_vmz {
-    'accept_ftp_from_vmz':      action => 'FTP(ACCEPT)';
     'accept_dns_from_vmz':      action => 'DNS(ACCEPT)';
     'accept_tftp_from_vmz':     action => 'TFTP(ACCEPT)';
     'accept_debproxy_from_vmz': proto => 'tcp', destinationport => '8000', action => 'ACCEPT';